<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Century Gothic";
panose-1:2 11 5 2 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle19
{mso-style-type:personal;
font-family:"Century Gothic",sans-serif;
color:#0D0D0D;
font-weight:normal;
font-style:normal;}
span.EmailStyle20
{mso-style-type:personal-compose;
font-family:"Century Gothic",sans-serif;
color:#0D0D0D;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:576939051;
mso-list-type:hybrid;
mso-list-template-ids:761418182 67698689 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:"Courier New";}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>This would be an enforcement nightmare.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:6.0pt'><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>Multiple enforcement mechanisms for ICANN Whois accreditation policy including govt agencies - potentially many govts around the world.<o:p></o:p></span></p><ul style='margin-top:0in' type=disc><li class=MsoListParagraph style='color:#0D0D0D;margin-bottom:6.0pt;margin-left:0in;mso-list:l0 level1 lfo1'><span style='font-family:"Century Gothic",sans-serif'>Could we implement standardized penalties? Or would it vary govt-to-govt?<o:p></o:p></span></li><li class=MsoListParagraph style='color:#0D0D0D;margin-bottom:6.0pt;margin-left:0in;mso-list:l0 level1 lfo1'><span style='font-family:"Century Gothic",sans-serif'>Would there also be private, for-profit enforcement entities?<o:p></o:p></span></li><li class=MsoListParagraph style='color:#0D0D0D;margin-bottom:6.0pt;margin-left:0in;mso-list:l0 level1 lfo1'><span style='font-family:"Century Gothic",sans-serif'>Would each entity be able to charge whatever they want?<o:p></o:p></span></li><li class=MsoListParagraph style='color:#0D0D0D;margin-left:0in;mso-list:l0 level1 lfo1'><span style='font-family:"Century Gothic",sans-serif'>What would happen if a govt wasn’t following the rules themselves - would they have provider contracts w/ ICANN?<o:p></o:p></span></li></ul><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>Unfortunately, this proposition sounds like an unmanageable, expensive & fragmented mess to me.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:12.0pt;font-family:"Century Gothic",sans-serif;color:#0D0D0D'>Cyntia King<o:p></o:p></span></b></p><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>O: +1 816.633.7647<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>C: +1 818.209.6088<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'><img width=129 height=58 style='width:1.3437in;height:.6041in' id="Picture_x0020_1" src="cid:image001.jpg@01D407CE.2D258CC0" alt="Email Logo5"><o:p></o:p></span></p></div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b>From:</b> Rubens Kuhl <rubensk@nic.br> <br><b>Sent:</b> Tuesday, June 19, 2018 1:03 PM<br><b>To:</b> Cyntia King <cking@modernip.com><br><b>Cc:</b> John R. Levine <johnl@iecc.com>; accred-model@icann.org<br><b>Subject:</b> Re: [Accred-Model] Version 1.6 of the Accreditation and Access Model<o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Cyntia,<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Just to be clear, the initial suggestion by Michael Palage incorporated in itself a mechanism, instead of relying on Privacy Shield. Perhaps Privacy Shield certification could be use to achieve some of its requirements in order to save for organizations already subscribed for it, instead of being the only option. <o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Rubens<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal><br><br><o:p></o:p></p><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>Em 19 de jun de 2018, à(s) 14:58:000, Cyntia King <<a href="mailto:cking@modernip.com">cking@modernip.com</a>> escreveu:<o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>Easy for whom?<br>I'm a small business owner & this is daunting, to say the least.<br>And there are multiple fees involved.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>Are we suggesting that this should be ICANN’s enforcement mechanism for accessing Whois data? This would be on top of the accreditation & fees we’re already discussing, right?<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>What about ‘foreign’ companies - are we asking non-US companies to self-certify w/ the Us govt?<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>I don’t see how this solves much of anything, but it would certainly make accreditation more difficult & expensive.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><b><span style='font-size:12.0pt;font-family:"Century Gothic",sans-serif;color:#0D0D0D'>Cyntia King</span></b><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>O: +1 816.633.7647</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>C: +1 818.209.6088</span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'><image001.jpg></span><o:p></o:p></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>-----Original Message-----<br>From: Accred-Model <</span><a href="mailto:accred-model-bounces@icann.org"><span style='font-family:"Century Gothic",sans-serif'>accred-model-bounces@icann.org</span></a><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>> On Behalf Of Rubens Kuhl<br>Sent: Tuesday, June 19, 2018 12:48 PM<br>To: John R. Levine <</span><a href="mailto:johnl@iecc.com"><span style='font-family:"Century Gothic",sans-serif'>johnl@iecc.com</span></a><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>><br>Cc: </span><a href="mailto:accred-model@icann.org"><span style='font-family:"Century Gothic",sans-serif'>accred-model@icann.org</span></a><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'><br>Subject: Re: [Accred-Model] Version 1.6 of the Accreditation and Access Model<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>> Em 19 de jun de 2018, à(s) 14:32:000, John R. Levine <</span><a href="mailto:johnl@iecc.com"><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D;text-decoration:none'>johnl@iecc.com</span></a><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>> escreveu:<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>><span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>>> It's great when there is actually an easy solution. At least for the many US companies, law firms, cybersecurity firms, and others (and this a huge part of the group seeking access), they should "self-certify" to the EU-US Privacy Shield, via procedures set up by the US Department of Commerce and Federal Trade Commission.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>><span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>> Well, at least until the EU courts kill privacy shield like they did Safe Harbor.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>><span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>> Banks and non-profits such as CAUCE are not eligible for Privacy Shield (they're not regulated by the FTC or DOT.) For small organizations the PS rules are extremely conplex and there's a mandatory annual payment to cover potential arbitration costs.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>><span class=apple-converted-space> </span><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>> Can we back up and explain what problem this overcomplex "solution" is supposed to be solving here?<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>Having redress mechanisms for data subjects that have their data privacy rights violated. With great power, there must also come great responsibility.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'> <o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-family:"Century Gothic",sans-serif;color:#0D0D0D'>Rubens<o:p></o:p></span></p></div></div></blockquote></div><p class=MsoNormal><o:p> </o:p></p></div></div></div></body></html>